Florida student-aid breach may expose Social Security numbers among 4.9 million people
Florida's education department says staff discovered unauthorised access to its student financial-aid website on 19 October. Potentially exposed information includes Social Security numbers, birth dates and contact details, but the information involved varies by person. The department says current aid is safe and its investigation continues.
Florida says a breach of its student financial-aid website may affect approximately 4.9 million people. Previous applicants should check the state's notice and protect their US credit files.
What happened
If you previously applied for financial aid in Florida, check the state's breach notice this week. Florida's education department says approximately 4.9 million people may be affected by unauthorised access to its student financial-aid website. Social Security numbers are among the information potentially exposed. Staff discovered the incident on 19 October, The Record reports[1].
The department announced the breach on 29 October[2]. It says it acted to stop the access and secure its systems, notified Florida's Attorney General and is working with state investigators.
- HARD severity
- High Identity protection needed
- Potential scope
- Approximately 4.9 million people
- Website involved
- FloridaStudentFinancialAidSG.org
- Financial aid
- Payments and eligibility unaffected, the department says
Timeline
-
HARD publishes its article, at High.
Who is affected
The department specifically warns people who previously applied for financial aid in Florida. That is a reason to check even if you are no longer studying. Ask family members who applied in the past to read the notice too.
The potentially exposed details include Social Security numbers, names, dates of birth, home addresses, phone numbers, email addresses and gender identification codes. The information varies by person; the figure does not mean every listed detail was exposed for everyone. WCTV reports the department's qualifications[4].
Protect your identity as well as your money
Stolen personal information can be used to open credit accounts in someone else's name. A credit freeze restricts new lenders' access to your credit file and can help prevent that. It does not protect existing accounts from takeover, so keep checking those too, the US Consumer Financial Protection Bureau advises[5].
What to do this week
- Read Florida's official notice.Go directly to the department's breach page[3]. It lists [email protected] for questions. Ask what information about you was involved.
- Freeze your US credit files.Contact Equifax, Experian and TransUnion separately. Placing and lifting a freeze is free. Temporarily lift it when a lender needs to check your file for a legitimate application. The Federal Trade Commission explains the process[6].
- Check all three credit reports.Use AnnualCreditReport.com and look for accounts you did not open. Free reports from each bureau are available weekly, according to the FTC's credit-report guide[7]. Review bank and card statements too.
- Act on unfamiliar activity.Contact the relevant financial institution's fraud team through its official app, website or phone number. If someone has used your identity, report it at IdentityTheft.gov for a recovery plan, as the CFPB recommends[5].
Related
Situations
- Revolve payment-card breach may affect 1.5 million shoppers Data breach, high, 6 Nov 2026
- DreamHost breach exposed file-transfer passwords; email and files may also have been accessed Data breach, high, 6 Nov 2026
- Chainalysis says login details for all its users were exposed; customers should reset passwords and rotate API keys Data breach, high, 7 Nov 2026
- DigiCert breach exposed customer contact details, and some passports and driver’s licences Data breach, high, 7 Nov 2026
- Every situation, in the Situation Room
Scams
- IRS scam calls how to spot it and what to do
References
- ^ The Record (). “Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach”. Reports the discovery date, affected website, potential population and aid assurances.
- ^ Florida Department of Education (). “Florida Department of Education is Aware of a Data Breach Incident Involving Unauthorized Criminal Access to Department Information”. Dated announcement confirms the response, Attorney General notification and coordination with state agencies.
- ^ Florida Department of Education. “Data Breach: statement and frequently asked questions”. Indexed official FAQ establishes potential scope, discovery date, data categories, applicant warning, aid assurances and contact details; direct retrieval timed out.
- ^ WCTV (). “Around 4.9 million people possibly impacted by Florida Student Financial Aid data breach, FLDOE says”. Corroborates the data categories, variation between individuals, ongoing investigation and department contact.
- ^ Consumer Financial Protection Bureau (). “What do I do if I am a victim of identity theft?”. Explains freeze limitations, contacting financial institutions and reporting identity theft for a recovery plan.
- ^ Federal Trade Commission. “Credit Freezes and Fraud Alerts”. Explains free freezes, separate requests to all three bureaus and temporarily lifting a freeze.
- ^ Federal Trade Commission. “Free Credit Reports”. Confirms free weekly reports from all three bureaus through AnnualCreditReport.com and checking for identity theft.
- DataBreaches.net (). “Florida education department says data breach may affect 4.9 million people”. Supplied report; original returned 403. Only its syndicated opening excerpt was readable, and no unique claim relies on it.
Situation Room articles are updated as events develop: updates are added to the timeline, and never edited away. Follow them by email or RSS.